Settled
Server Details
Check x402 endpoints before your agent pays: payTo, paid test purchases, payee and buyer reports
- Status
- Healthy
- Uptime
- 100.0% over 28 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 18 tools
Most tools occupy clearly separate slots, and the descriptions actively disambiguate with explicit 'Use when / Not for / After' clauses, especially among the three endpoint-lookup tiers (settled_peek index-only, settled_check fuller cached, settled_preflight fresh paid probe). The residual risk is that settled_check / settled_peek / settled_preflight, and settled_sellers / settled_seller_reputation, look near-identical by name and require reading the description to pick correctly. Nothing is truly redundant, but a careless agent could easily pick the wrong tier or the wrong seller-level tool.
Every tool uses the same 'settled_' prefix plus snake_case, and the sub-families are grouped predictably (settled_income_*, settled_watch_*). Verb/noun style is consistent (check, find_endpoints, submit, report, verify, claim, watch_alerts). Minor overlaps in verbs (check vs income_check) are resolved by the prefix, not a convention break.
18 tools is on the heavy side, but the server covers three genuinely large areas (x402 endpoint trust, seller/claim management, agent income venues) plus monitoring and attestation, so most tools earn a slot. The one soft spot is the three-way overlap in endpoint inspection, which could plausibly be two tools instead of three. Slightly over-scoped rather than bloated.
The lifecycle is well covered: discover (find_endpoints), inspect (peek/check/preflight), submit unknown URLs, pay, report, verify signatures, monitor (watch + alerts), plus seller reputation/claims and the income side (venues, listings, honeypot check). Gaps are minor: there is no way to list, stop, or cancel an existing watch, and no view of an agent's own payment/report history. These are workarounds-possible omissions rather than dead ends.
Available Tools
18 toolssettled_checkCheck an x402 endpointARead-onlyIdempotentInspect
Free: 25 calls/day per address, 300 with a payer record (free, keyed to your wallet), no daily cap with a pass. Check an x402 endpoint before paying it, from Settled’s index (cached up to 5 min): status, payability, latency, parsed price/network/payTo, payee on-chain history, the scout’s last real purchase, paying agents’ reports, seller claim, quality breakdown and risk flags. Use when: deciding whether to call an endpoint, and for routine re-checks. Not for: a fresh probe right now (settled_preflight) or searching (settled_find_endpoints). If status is unknown, call settled_submit; after paying, call settled_report.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Full URL of the x402 endpoint, e.g. https://api.example.com/search | |
| pass | No | Settled day pass token: lifts the free daily cap; or send it as the x-settled-pass header | |
| force | No | true to probe now instead of using the 5-minute cache; needs a pass | |
| payer_token | No | A Settled payer token (x4t_…, from POST /x401/token with your payer record): the free tier then follows your wallet, 300 a day, through any gateway |
Output Schema
| Name | Required | Description |
|---|---|---|
| url | No | The endpoint |
| asset | No | Asset of the cheapest option |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| flags | No | Risk flags |
| payee | No | Whether the payTo has on-chain history |
| cached | No | Whether this came from Settled's 5-minute cache |
| pay_to | No | The payTo Settled's probe sees; compare it with the quote you are about to pay |
| scheme | No | Payment scheme, e.g. exact |
| status | No | Endpoint status, e.g. live, degraded, dead, free, auth_gated, not_found or quote_invalid |
| network | No | Network of the cheapest option (CAIP-2) |
| onchain | No | Settlements and unique payers over the last 30 days |
| quality | No | Quality score breakdown |
| reports | No | Paying agents' reports |
| evidence | No | The grade of the evidence and the receipt line first: grade purchased (Settled paid this endpoint and compared what came back with the listing; receipt has the amount, day, bytes, listing verdict and Base transaction) or observed (live probes, payTo history and agent reports only; the scout buys and the ledger reads on Base, so an endpoint on another network is observed only) |
| price_usd | No | Price per call in USD (cheapest option) |
| checked_at | No | When this answer was built |
| first_seen | No | When Settled first saw it |
| last_ok_at | No | When it last answered with a valid quote |
| latency_ms | No | Latency of the latest probe |
| payability | No | Payability verdict and the verb that pays |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| description | No | The listing's description |
| network_name | No | Readable network name |
| seller_claim | No | The seller's claim and profile, if claimed |
| service_name | No | The listing's service name |
| x402_version | No | x402 version of the quote |
| last_probe_at | No | When Settled last probed it |
| delivery_receipt | No | The scout's last purchase, with its settlement transaction and checks (when the scout has bought it) |
| http_status_last | No | HTTP status of the latest probe |
| last_delivery_at | No | When the scout last bought it |
| delivery_verified | No | Whether a real payment by Settled's scout came back with content |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/idempotent annotations by disclosing quota mechanics (25/day per address, 300 with a payer record, uncapped with a pass) and cache staleness (up to 5 min), which materially affect result freshness and failure modes. It also surfaces downstream workflow obligations (submit if unknown, report after paying).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Dense but every sentence carries information; the use/not-for/next-step structure is easy to parse. Mild weakness: the pricing/quota sentence is front-loaded ahead of the core purpose, so the most decision-relevant statement is not first.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, the description need only cover selection, cost, and caching — all of which it does, plus cross-tool handoffs. Nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3; the description still adds value by tying the free-tier behavior to the payer record/pass and by framing `force` as a probe that bypasses the 5-minute cache and requires a pass. It does not add syntax or format detail beyond the schema, hence not a 5.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a concrete verb+resource ('Check an x402 endpoint'), names the data source ('Settled's index, cached up to 5 min'), and enumerates the returned signals (status, payability, latency, price/network/payTo, payee history, reports, risk flags). It also explicitly separates itself from settled_preflight (fresh probe) and settled_find_endpoints (search), so an agent can pick it without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit 'Use when' (deciding whether to call an endpoint; routine re-checks) and 'Not for' clauses naming the two alternatives. It further routes follow-ups: settled_submit when status is unknown, settled_report after paying — a full decision tree rather than an implied one.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_claimClaim your endpoints (sellers)AIdempotentInspect
Free. For sellers: claim every x402 endpoint paid to your wallet with one signature, on every host, so your name, website, contact and docs show next to them (plus a 10-day Seller Watch trial). Use when: you operate x402 endpoints. Not for: buyers or third parties; only the payTo wallet can sign. Flow: call with wallet and profile to get message_to_sign and issued_at; sign with that wallet; call again with issued_at and signature. action=remove withdraws a claim (reversible by claiming again). Claims never change scores.
| Name | Required | Description | Default |
|---|---|---|---|
| docs | No | Your API documentation, as a full https URL | |
| name | No | Seller name to show on your endpoints, up to 80 characters, e.g. Acme Data | |
| action | No | claim (default) or remove to withdraw an existing claim | |
| wallet | Yes | The payTo wallet your endpoints are paid to: 0x + 40 hex characters on Base, or a base58 address on Solana | |
| contact | No | How buyers can reach you, e.g. hello@example.com or @handle on X | |
| website | No | Your website, as a full https URL | |
| issued_at | No | The issued_at timestamp returned by the first call; send it back unchanged with the signature | |
| signature | No | Signature of message_to_sign by the wallet: EIP-191 personal_sign (0x hex) on Base, ed25519 (base58) on Solana; omit on the first call |
Output Schema
| Name | Required | Description |
|---|---|---|
| note | No | What the claim does |
| error | No | signature_required on the first call (sign message_to_sign and call again), or why the claim was refused |
| covers | No | The endpoints and hosts the claim covers |
| wallet | No | The wallet |
| claimed | No | true once the claim is recorded |
| network | No | The wallet's network |
| profile | No | The published profile: name, website, contact, docs |
| removed | No | true once a claim is withdrawn |
| issued_at | No | Timestamp to send back with the signature |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| would_cover | No | The endpoints and hosts the claim would cover |
| message_to_sign | No | The exact message to sign with the wallet |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare the write/idempotent/non-destructive profile, and the description adds substantial context on top: it is free, requires a two-step sign-then-submit flow, only the payTo wallet may sign, action=remove is reversible by re-claiming, and claims never change scores. That covers cost, auth, side effects, and an important non-effect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with audience and value, then use/not-for, then the flow, then the remove caveat. Dense but every clause (cost, signature flow, reversibility, score neutrality) carries information an agent needs.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an 8-parameter, annotated, write tool with an output schema, the description covers audience, precondition, two-step flow, cost, and removal semantics. Return values are covered by the output schema, so nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the individual fields are already documented. The description adds cross-parameter semantics the schema cannot convey: the ordering between wallet/profile, message_to_sign/issued_at, and signature across two calls, plus the action=remove behavior. It stops short of deeper per-parameter detail, which the schema already owns.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (claim) and resource (x402 endpoints paid to your wallet), and names the audience (sellers). It is clearly distinguishable from siblings like settled_check, settled_watch, and settled_income_* which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'Use when: you operate x402 endpoints' and 'Not for: buyers or third parties; only the payTo wallet can sign,' giving both the trigger condition and the exclusions/precondition. This is textbook when/when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_eventsChange feedARead-onlyIdempotentInspect
Free: 25 calls/day per address, 300 with a payer record, no daily cap with a pass. Recent changes worth acting on: venue verdict flips, new suspected honeypots, settlement-integrity changes, newest first. Use when: your agent runs on a schedule and wants to react to what changed since last time. Not for: the full picture (settled_income_venues) or endpoint-level changes (settled_watch). Poll this instead of re-reading the scorecard.
| Name | Required | Description | Default |
|---|---|---|---|
| pass | No | Settled day pass token: lifts the free daily cap; or send it as the x-settled-pass header | |
| limit | No | How many events to return, newest first, 1-200 (default 50) | |
| payer_token | No | A Settled payer token (x4t_…, from POST /x401/token with your payer record): the free tier then follows your wallet, 300 a day, through any gateway |
Output Schema
| Name | Required | Description |
|---|---|---|
| count | No | Number of events returned |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| events | No | Changes newest first: venue verdict flips, new suspected honeypots, settlement-integrity changes |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| generated_at | No | When this list was built |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds rate-limit and quota tiers (25/day, 300 with payer, uncapped with pass) that annotations do not carry, plus result ordering — genuine context beyond readOnly/idempotent hints. It does not disclose how far back events are retained or that there is no cursor parameter, so 'what changed since last time' implies statefulness the schema can't support.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Dense but every sentence carries information: quota, payload contents, usage trigger, exclusions, and polling advice. The quota line leads, which delays the purpose statement slightly in favor of operational constraints.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With annotations, full schema coverage, and an output schema, the remaining burden on the description is small and it covers usage, quotas, and alternatives. The notable omission is how much history is available and how to avoid re-processing events when polling, which matters for the scheduled-agent use case it recommends.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% so the baseline is 3, but the description adds value by explaining what a pass and payer record buy in quota terms, mapping free-tier behavior to those two parameters. It says nothing extra about `limit` beyond the schema's own 1-200/default-50 documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Names the resource concretely and enumerates the event types returned (venue verdict flips, new honeypots, settlement-integrity changes) with ordering (newest first). An agent can tell it apart from settled_income_venues and settled_watch without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Uses explicit 'Use when' / 'Not for' framing and names the two alternative siblings with the conditions that select them. It also states the operational preference: poll this instead of re-reading the scorecard.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_find_endpointsFind live x402 endpointsARead-onlyIdempotentInspect
Free up to 50 calls/day per client (a pass allows 1,000). Ranked live endpoints by keyword, network and max price (sort by quality, price, latency or payers), each with payability and delivery verification. Use when: you need an x402 endpoint for a capability and want candidates that are live, payable and, where possible, proven to deliver. Not for: verifying one known URL (settled_check). After: run settled_check or settled_preflight on the one you pick before paying.
| Name | Required | Description | Default |
|---|---|---|---|
| q | No | Keywords to match in endpoint names, descriptions and URLs, e.g. weather or gift cards | |
| pass | No | Settled day pass token: lifts the free daily cap; or send it as the x-settled-pass header | |
| sort | No | Order of results: quality (default), price, latency or payers | |
| limit | No | How many endpoints to return, 1-50 (default 20) | |
| status | No | Only endpoints with this status; live (default) or any for every status | |
| network | No | Only endpoints on this network, as a CAIP-2 id, e.g. eip155:8453 for Base | |
| max_price | No | Highest price per call in USD, e.g. 0.01 | |
| payer_token | No | A Settled payer token (x4t_…, from POST /x401/token with your payer record): the free tier then follows your wallet, 300 a day, through any gateway |
Output Schema
| Name | Required | Description |
|---|---|---|
| count | No | Number of endpoints returned |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| items | No | Ranked endpoints, each with payability and delivery status |
| filters | No | The filters applied |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| generated_at | No | When this list was built |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, closed-world), but the description adds genuinely non-structured behavior: a free quota of 50 calls/day, a pass lifting it to 1,000, and the fact that results carry payability and delivery verification. It doesn't discuss result volume/pagination beyond the schema's limit, which keeps it just short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three compact sentences that front-load the quota and the ranked-results framing, then the routing guidance. Densely packed but every clause carries information; no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 8 optional params, full schema coverage, annotations, and an output schema in place, the description supplies exactly the missing layer: quota behavior, what the ranking means, when to use it, and the required follow-up check before paying. Nothing an agent needs to select or call it is absent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so every parameter is already documented, including the sort enum and the CAIP-2 network format. The description only restates keyword/network/price/sort semantics and adds no format or edge-case detail beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('find/rank live endpoints') plus the filters and sort dimension, and frames the result set (payability and delivery verification). It is clearly distinct from the sibling set, which is mostly per-URL checkers and seller/reputation tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'Use when' condition, an explicit 'Not for: verifying one known URL (settled_check)' exclusion naming the alternative, and an 'After' step routing to settled_check or settled_preflight before paying. This is the full when/when-not/next-action triad.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_income_checkHoneypot / trust scan of one listingARead-onlyIdempotentInspect
Pass required. Fetches a bounty issue, repository or listing page and scans it for patterns used to bait agents (hidden HTML-comment instructions, prompt injection, credential requests, fork/star anomalies, dead or archived repos, reward anomalies). Returns trust, label and every flag with its reason. Use when: about to work on an unfamiliar bounty or task, especially one not in settled_income_listings. Not for: x402 API endpoints (settled_check). Treat a suspected_honeypot label as do-not-work; a clean result is not a promise of payment.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | URL of the bounty issue, repository or listing page to scan | |
| pass | No | Settled day pass token, if you did not send it as the x-settled-pass header |
Output Schema
| Name | Required | Description |
|---|---|---|
| url | No | The page scanned |
| note | No | How to read the result |
| repo | No | Repository facts, for GitHub links |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| flags | No | Every flag found, with its reason |
| label | No | verified_paying, unverified, gated, suspected_honeypot, dead or closed_to_agents |
| trust | No | Trust score 0-100 |
| source | No | What was scanned, e.g. page_text |
| indexed | No | Settled's listing for this URL, if it has one |
| scanned_at | No | When the scan ran |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnlyHint, idempotentHint, destructiveHint=false), but the description adds real context beyond them: an auth requirement ('Pass required'), the returned fields (trust, label, every flag with its reason), and decision guidance ('Treat a suspected_honeypot label as do-not-work; a clean result is not a promise of payment') — the last being a key non-obvious behavioral caveat.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the blocking constraint ('Pass required'), then what it does, what it returns, usage routing, and interpretation caveat. Four dense sentences with no filler; every clause carries information an agent needs.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so the description needn't enumerate return fields, and it still summarizes them (trust, label, flags with reasons). Auth, scope, sibling exclusions, trigger conditions and result interpretation are all covered for what is a read-only scan tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3, but the description adds a clarifying constraint not evident from the schema: the pass token is effectively mandatory ('Pass required'), explaining why it sits in properties but not in the required array (it may arrive as the x-settled-pass header). The url parameter's meaning is left entirely to the schema, so this is a modest but genuine addition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb+resource: fetches a bounty issue, repository or listing page and scans it for bait patterns, with the pattern categories enumerated (hidden HTML-comment instructions, prompt injection, credential requests, fork/star anomalies, dead/archived repos, reward anomalies). It explicitly differentiates from the sibling settled_check by scope ('Not for: x402 API endpoints'), so an agent can select correctly without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit when-to-use ('about to work on an unfamiliar bounty or task, especially one not in settled_income_listings'), an explicit when-not ('x402 API endpoints'), and names the alternative tool (settled_check). Nothing about tool selection is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_income_listingsVerified agent-income listingsARead-onlyIdempotentInspect
Pass required. Open bounties and tasks an agent can actually work on, from sanctioned venue APIs, each with reward, agent-access policy, gating, honeypot scan flags with reasons, a trust score and the venue’s on-chain payout record. Use when: an agent is looking for work it is allowed to do. Not for: venue-level questions (settled_income_venues). Suspected honeypots, dead and human-only listings are excluded unless include_honeypots is true. Before working one, run settled_income_check on its URL.
| Name | Required | Description | Default |
|---|---|---|---|
| pass | No | Settled day pass token, if you did not send it as the x-settled-pass header | |
| rail | No | Only listings paid on this rail, e.g. usdc-base | |
| sort | No | Order of results: trust (default), reward or recent | |
| limit | No | How many listings to return, 1-50 (default 20) | |
| venue | No | Only listings from this venue, by its slug from settled_income_venues, e.g. superteam-earn | |
| min_reward | No | Smallest reward to include, in USD, e.g. 50 | |
| agent_access | No | allowed (default) for listings agents may take, or any to include human-only ones | |
| include_honeypots | No | true to include suspected honeypots and dead listings |
Output Schema
| Name | Required | Description |
|---|---|---|
| count | No | Number of listings returned |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| items | No | Open bounties and tasks with reward, agent access, gating, honeypot flags, trust score and the venue's payout record |
| filters | No | The filters applied |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| generated_at | No | When this list was built |
| label_vocabulary | No | The possible listing labels |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly/idempotent/non-destructive, and the description adds useful behavior beyond that: the pass prerequisite, the exclusion defaults (honeypots, dead, human-only), and the trust/honeypot fields returned. It does not spell out pagination or pass failure behavior, but the safety profile is well covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the requirement and the result set, then the when/not-for clauses, then a follow-up instruction. Dense but every clause carries routing or behavioral information; only mild redundancy in restating the exclusion policy already implied by the param.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described, and the description still names the key fields. Combined with annotations and the explicit sibling routing, an agent has everything needed to call this correctly and follow up with settled_income_check.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so all eight parameters are documented in the schema (enums, defaults, ranges). The description only reinforces a couple of defaults (include_honeypots, agent-access gating) and adds no syntax or format detail beyond the schema. Baseline 3 applies when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear scope statement ('Open bounties and tasks an agent can actually work on, from sanctioned venue APIs') and enumerates the data each listing carries. It names the sibling it is not for (settled_income_venues), letting an agent separate this listing tool from the venue-level tool without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'Use when' and 'Not for' clauses name the exact alternative (settled_income_venues), and the exclusion behavior is stated ('Suspected honeypots, dead and human-only listings are excluded unless ...'). It also routes a follow-up action ('run settled_income_check on its URL'), which is real invocation guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_income_venuesWhich venues actually pay agentsARead-onlyIdempotentInspect
Free. Scorecard of bounty boards, task markets, audit contests and the x402 sell-side: verdict (paying / paying small / measuring / no payouts seen / unmeasured / closed to agents / defunct), agent policy, gating (KYC, human claim, self-custody wallet), open listings and on-chain payouts. Use when: choosing where an agent should look for paid work, or checking whether a venue actually pays. Not for: individual listings (settled_income_listings) or x402 endpoints (settled_find_endpoints). Poll settled_events for changes instead of re-reading this.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| count | No | Number of venues |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| venues | No | Each venue with its verdict, agent policy, gating, open listings and on-chain payouts |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| generated_at | No | When this list was built |
| verdict_vocabulary | No | The possible verdicts |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so safety is covered. The description adds genuine context beyond that: it is 'Free', it surfaces gating requirements (KYC, human claim, self-custody wallet), it implies the underlying data changes over time by recommending settled_events polling, and it enumerates the verdict values an agent will receive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the most decision-relevant word first ('Free.'), then the resource scope, then use/not-for routing and a polling hint. The verdict enumeration is dense but each token is decision-relevant; only the length of the single paragraph slightly hurts scannability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no explanation, and with zero parameters there is no input contract to document. The description covers purpose, routing to siblings, gating caveats, data freshness, and cost — everything needed to call this correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the baseline is 4 and there are no parameter semantics for the description to compensate for. Schema coverage is 100% and the description correctly spends no space restating inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific resource (a scorecard of bounty boards, task markets, audit contests and the x402 sell-side) with its scope spelled out via the verdict taxonomy (paying / paying small / measuring / no payouts seen / unmeasured / closed to agents / defunct). It explicitly names the sibling tools it is not (settled_income_listings, settled_find_endpoints), so an agent can route without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Contains an explicit 'Use when:' clause (choosing where an agent should look for paid work, or checking whether a venue actually pays) and an explicit 'Not for:' clause naming the two alternative tools for individual listings and x402 endpoints. It also pre-empts re-polling by directing the agent to settled_events for changes.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_peekPeek at an endpointARead-onlyIdempotentInspect
Free, rate-limited. Coarse status and quality score for one x402 endpoint URL, from the index only (no fresh probe). Use when: you only need a quick yes/no on whether Settled knows the URL and its last status. Not for: deciding whether to pay — use settled_check (free, fuller) or settled_preflight (paid, fresh). If the URL is unknown, call settled_submit, then check again later.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Full URL of the x402 endpoint, e.g. https://api.example.com/search |
Output Schema
| Name | Required | Description |
|---|---|---|
| url | No | The endpoint |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| detail | No | Where to get the full check |
| status | No | Endpoint status, e.g. live, degraded, dead, free, auth_gated, not_found or quote_invalid |
| quality | No | Quality score 0-100 |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| last_probe_at | No | When Settled last probed it |
| seller_claimed | No | Whether the seller has claimed it |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the safety profile (readOnly, idempotent, non-destructive, non-open-world), and the description adds traits annotations cannot convey: it is free but rate-limited, results come from the index rather than a live probe (staleness), and the unknown-URL fallback path. This is exactly the extra context the scoring bar rewards.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads cost and scope in the first sentence, then gives 'Use when' / 'Not for' / fallback in tight sequence. No sentence is redundant and each carries routing or cost information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return-value detail is unnecessary. For a one-parameter read tool, the description covers cost, freshness limitation, sibling routing, and the unknown-URL recovery path — everything needed to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single url parameter already has a format constraint and a worked example. The description only echoes the parameter as 'one x402 endpoint URL', adding no syntax or format detail beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('coarse status and quality score for one x402 endpoint URL') plus the scope constraint ('from the index only, no fresh probe'). An agent can distinguish this from settled_check and settled_preflight without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Uses explicit 'Use when:' and 'Not for:' clauses, names the two alternative tools with their cost/freshness tradeoffs, and routes the unknown-URL case to settled_submit. Nothing about when to pick this tool is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_preflightPre-spend check (pay / caution / avoid)ARead-onlyIdempotentInspect
Pass required. The call to make right before paying an unfamiliar x402 endpoint: a fresh probe, parsed quote, payability, payTo on-chain history, seller integrity, the scout’s real-payment delivery result and a honeypot scan, as one signed answer with a recommendation (pay, caution or avoid) and reasons. Use when: real money is about to leave your wallet and settled_check was stale or not enough. Not for: browsing (settled_find_endpoints) or endpoints you already verified. After: compare pay_to and price with the 402 you receive, pay, then call settled_report.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Full URL of the x402 endpoint, e.g. https://api.example.com/search | |
| pass | No | Settled day pass token, if you did not send it as the x-settled-pass header | |
| force | No | true to probe the endpoint now instead of reusing a result up to 5 minutes old |
Output Schema
| Name | Required | Description |
|---|---|---|
| url | No | The endpoint |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| flags | No | Risk flags |
| payee | No | Whether the payTo exists on-chain, and the seller's other endpoints and settlement integrity |
| quote | No | The parsed 402 quote Settled sees: network, asset, price_usd, pay_to |
| cached | No | Whether the probe came from Settled's 5-minute cache |
| onchain | No | Settlements and unique payers over the last 30 days |
| quality | No | Quality score breakdown |
| reasons | No | Why, in plain words |
| reports | No | Paying agents' reports |
| delivery | No | The scout's last real purchase and whether it matched the listing |
| honeypot | No | Honeypot scan of the listing text |
| liveness | No | Fresh probe results |
| checked_at | No | When this check ran |
| payability | No | Payability verdict and the verb that pays |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| description | No | The listing's description |
| seller_claim | No | The seller's claim and profile, if claimed |
| recommendation | No | pay, caution or avoid |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, openWorld, non-destructive), but the description adds context they do not: authentication ('Pass required'), the freshness model behind force (probe now vs. reuse a result up to 5 minutes old), and that the output is a signed answer with a pay/caution/avoid recommendation. It stops short of stating failure modes or rate limits, so a 4 rather than 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the critical constraint ('Pass required'), then intent, then Use when / Not for / After in a scannable structure. It is dense and slightly long, but nearly every clause carries operative information rather than filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no elaboration; the description still flags that the response is a signed recommendation with reasons. Combined with the use-when/not-for/after guidance and the auth requirement, an agent has everything needed to decide, invoke, and sequence this call correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds meaning beyond the schema: 'Pass required' ties the pass parameter to an auth gate, and 'a fresh probe' explains the semantics of force (probing now rather than reusing a cached result). The url parameter is left to the schema's own description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific action (a pre-spend probe/check) on a specific resource (an x402 endpoint about to be paid) and enumerates exactly what the check composes: fresh probe, parsed quote, payability, payTo on-chain history, seller integrity, scout delivery result, honeypot scan. It clearly separates itself from settled_check ('stale or not enough') and from settled_find_endpoints.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'Use when: real money is about to leave your wallet and settled_check was stale or not enough' and 'Not for: browsing (settled_find_endpoints) or endpoints you already verified', plus a named follow-up sequence ('compare pay_to and price ... pay, then call settled_report'). Alternatives and exclusion conditions are stated directly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_reportReport whether a paid call workedAIdempotentInspect
Free. After paying an x402 endpoint on Base, tell Settled whether you got what you paid for. Use when: your agent has just made a real USDC payment and has the transaction hash. Not for: endpoints you did not pay, or payments on other chains. Flow: call without signature to get message_to_sign; sign it with the paying wallet (EIP-191 personal_sign); call again with signature. One report per payment, one vote per wallet per endpoint; Settled keeps only per-endpoint tallies.
| Name | Required | Description | Default |
|---|---|---|---|
| ok | Yes | true if the call delivered what you paid for, false if it did not | |
| tx | Yes | Transaction hash of your USDC payment to that endpoint on Base, from the last 30 days: 0x followed by 64 hex characters, e.g. 0x3f9a...c21e | |
| url | Yes | The x402 endpoint you paid | |
| signature | No | EIP-191 personal_sign of message_to_sign by the wallet that paid (0x + 130 hex characters); omit on the first call to get message_to_sign |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | No | Your verdict, as recorded |
| url | No | The endpoint |
| error | No | signature_required when no signature was given (sign message_to_sign and call again), or why the report was refused |
| paid_at | No | When your payment was made |
| privacy | No | What Settled keeps about you |
| reports | No | This endpoint's report tallies |
| accepted | No | true once the report is recorded |
| paid_usd | No | What your transaction paid the endpoint, in USD |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| message_to_sign | No | The exact message to sign with the paying wallet |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare a non-read-only, idempotent, non-destructive write; the description adds substantial context beyond that: the tool is free, requires an EIP-191 signature from the paying wallet, has rate/consistency limits (one report per payment, one vote per wallet per endpoint), and retains only per-endpoint tallies. These are real behavioral facts the annotations do not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads 'Free', then separates Use-when, Not-for, and Flow into scannable clauses with no filler. Every sentence carries actionable information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-phase signed write with an output schema present, the description supplies the when/when-not, the signing flow, and the retention/rate constraints an agent needs. Return values are covered by the output schema, so no gap remains.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with each field already documenting its type, pattern, and role, including the 'omit on first call' signature behavior. The description restates the same tx/url/ok/signature semantics in scenario language but adds no format or syntax detail beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a precise verb and resource (report whether a paid x402 call worked) and anchors it to a concrete scenario: an agent that just made a real USDC payment on Base and holds the tx hash. It is clearly distinguishable from siblings like settled_check and settled_verify without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'Use when' (just paid, has tx hash) and 'Not for' (unpaid endpoints, other chains) clauses remove ambiguity, and the two-step flow tells the agent exactly how to proceed. Nothing about selection or prerequisites is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_seller_reputationSeller reputation by payTo addressARead-onlyIdempotentInspect
Pass required. Everything Settled knows about one payTo address: the endpoints it is paid for, live/dead counts, price range, clone-farm and quote-only flags, on-chain settlements and unique payers. Use when: several endpoints share a seller and you want to judge the seller rather than one URL, or a payTo looks unfamiliar. Not for: a single endpoint’s status (settled_check). Input is the wallet address from a 402 quote.
| Name | Required | Description | Default |
|---|---|---|---|
| pass | No | Settled day pass token, if you did not send it as the x-settled-pass header | |
| address | Yes | The payTo address from a 402 quote: 0x followed by 40 hex characters (Base) |
Output Schema
| Name | Required | Description |
|---|---|---|
| dead | No | How many are dead |
| live | No | How many are live |
| claim | No | The seller's claim and profile, if claimed |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| flags | No | Seller flags such as clone_farm or quote_only |
| hosts | No | Hosts serving them |
| address | No | The payTo address |
| onchain | No | On-chain settlements and unique payers |
| endpoints | No | Endpoints paid to it |
| first_seen | No | When Settled first saw one |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| generated_at | No | When this answer was built |
| top_endpoints | No | Its main endpoints |
| price_range_usd | No | Lowest and highest price |
| settlement_integrity | No | Whether paid activity looks organic or self-generated |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), so the bar is lower, but the description still adds valuable operational context: 'Pass required' flags the auth prerequisite and the field list tells the agent what evidence the judgment rests on. It stops short of describing freshness or rate limits, so not a full 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with the payload summary then the when/when-not routing, with zero filler. Every clause carries selection-relevant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return-value documentation is unnecessary, and the description covers selection, auth prerequisite, and input provenance. Nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the schema already states the 0x+40-hex format and the 402-quote provenance, so the description largely restates what is structured. 'Pass required' and 'Input is the wallet address from a 402 quote' add workflow context but no new syntax or semantics beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Everything Settled knows about one payTo address') and enumerates exactly what is returned: endpoints, live/dead counts, price range, clone-farm and quote-only flags, settlements, unique payers. This is clearly distinguishable from settled_check, which it names as the single-endpoint alternative.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit when-to-use ('several endpoints share a seller', 'a payTo looks unfamiliar') and explicit when-not ('Not for: a single endpoint's status') with the named alternative (settled_check). Nothing is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_sellersClaimed sellersARead-onlyIdempotentInspect
Free. Sellers who proved control of the wallet their x402 endpoints are paid to, with their published profile and endpoint counts. Use when: you want a contact or docs link for a seller, or to see which sellers stand behind their endpoints. Not for: judging an endpoint’s quality (claims never change scores; use settled_check). Paged: limit (max 50) and offset, with a total.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | How many sellers to return, 1-50 (default 25) | |
| offset | No | How many sellers to skip, for paging (default 0) |
Output Schema
| Name | Required | Description |
|---|---|---|
| note | No | What a claim proves |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| limit | No | Page size used |
| total | No | Total claimed sellers |
| offset | No | Offset used |
| sellers | No | Claimed sellers with their profile and endpoint counts |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| generated_at | No | When this list was built |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly, idempotent and non-destructive behavior, so the description isn't burdened with the safety profile. It adds context the annotations lack: the call is 'Free,' it is paged with a total, and claims never alter scores. It stops short of describing sorting or what fields a profile contains, but with an output schema present that is acceptable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Information-dense with zero filler: cost, definition, when/when-not, and paging are all front-loaded and each sentence earns its place. 'Free.' as a leading word is a deliberate, useful signal.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given an output schema exists, return values need no explanation. Cost, use/avoid conditions, paging behavior and the relationship to scoring are all covered, so an agent has everything needed to select and call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so limit/offset are already fully documented with defaults and ranges. The description restates the limit cap and offset and adds that a total is returned, which is marginal value over the structured fields. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description defines the returned resource precisely: sellers who cryptographically proved control of the wallet their x402 endpoints are paid to, along with profile and endpoint counts. The verb is implicit rather than stated ('Paged: limit... offset'), but an agent can immediately tell this is a listing of verified/claimed sellers, distinct from the scoring-oriented siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit when-to-use triggers (want a contact or docs link, or want to see which sellers stand behind their endpoints) and an explicit when-not with the alternative named ('Not for: judging an endpoint's quality... use settled_check'). Nothing is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_statusSettled index statusARead-onlyIdempotentInspect
Free. Size and freshness of the x402 endpoint index and the on-chain ledger. Use when: you need to know how current Settled’s data is, or what the paid routes cost, before relying on any other tool. Not for: looking up a specific endpoint (use settled_check). No input.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| mcp | No | This MCP server's URL |
| docs | No | Where the docs are |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| scout | No | Totals for the scout's paid test purchases |
| network | No | Network Settled's own paid routes settle on (CAIP-2) |
| service | No | Always Settled |
| sources | No | Discovery sources and how far each import has got |
| version | No | Settled's software version |
| by_status | No | Endpoint counts by status (live, dead, ...) |
| prices_usd | No | Prices of Settled's paid routes, in USD |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| total_probes | No | Probes run so far |
| last_probe_at | No | When the latest probe ran |
| settlement_7d | No | x402 payments (matching a quoted price; crawlers and monitors left out) to tracked sellers over the 7 whole UTC days to yesterday (days gives the first and last) |
| onchain_ledger | No | Coverage of Settled's on-chain settlement ledger |
| endpoints_probed | No | How many have been probed |
| endpoints_tracked | No | Number of x402 endpoints Settled tracks |
| live_share_of_probed | No | Percentage of probed endpoints that are live |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world, so the safety profile is covered. The description still adds genuinely new context: 'Free' (no paid invocation), 'No input', and the fact that the response covers both index freshness and paid-route pricing. It does not discuss rate limits or update cadence, but for a status read that is a minor gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the cost fact ('Free.'), then purpose, then when-to-use, then exclusion. Every clause earns its place; no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described. Combined with full annotation coverage and zero parameters, the description supplies everything needed to decide when to call it and what to expect.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Zero parameters, so the baseline is 4. The description confirms 'No input', which is consistent with the empty schema and prevents an agent from inventing arguments.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific resource ('the x402 endpoint index and the on-chain ledger') and exactly what aspect it reports ('size and freshness'). It also names the sibling it is not for (settled_check), so an agent can route between them without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'Use when' clause names the decision it supports (judging data currency, route cost before relying on other tools) and an explicit 'Not for' clause redirects to settled_check. Both selection conditions are unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_submitSubmit an endpointAIdempotentInspect
Free, rate-limited. Queue an x402 endpoint URL for indexing. Use when: settled_check or settled_peek reports the URL as unknown or not indexed. Not for: URLs already indexed (it just returns their status) or non-x402 URLs. After: wait a few minutes, then call settled_check; the first probe runs within minutes. Idempotent.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Full URL of an x402 endpoint to add to Settled's index |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | No | true when accepted |
| hint | No | What to call next |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| queued | No | true when queued for its first probe |
| status | No | Its current status, if already indexed |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| next_check_at | No | When it will next be probed |
| already_indexed | No | true when Settled already tracks it |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover idempotency and non-destructive/write semantics, but the description adds genuinely new context: it is free, rate-limited, asynchronous, and the first probe runs within minutes. That timing/rate-limit detail is what the agent most needs. Only minor gap is no mention of what a submission returns, though a separate output schema exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Tight and front-loaded: cost/limit caveat first, then the action, then when/when-not/after in short clauses. Every sentence carries operational signal with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-param submission tool with an output schema present, the description fully covers cost, rate limits, selection criteria, exclusions, follow-up, and idempotency. Nothing an agent needs to call it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Single required parameter with 100% schema coverage, so the schema already documents 'url' fully. The description implies the URL must be an x402 endpoint, which aligns with the schema but adds no syntax or format detail beyond it. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: 'Queue an x402 endpoint URL for indexing.' The x402 qualifier and the 'indexing' action distinguish it cleanly from siblings like settled_check and settled_peek.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit when-to-use ('settled_check or settled_peek reports the URL as unknown or not indexed'), explicit when-not ('URLs already indexed... or non-x402 URLs'), and a follow-up step ('wait a few minutes, then call settled_check'). Nothing is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_verifyVerify a signed Settled responseARead-onlyIdempotentInspect
Free. Pass any signed Settled response (attestation included) to recompute its hash and recover the signer; tells you whether it is authentic and unaltered. Use when: a Settled answer reached you through a third party, a cache or a log and you need to trust it. Not for: answers you just received directly over this server (already signed and fresh). Use the full response object, unchanged.
| Name | Required | Description | Default |
|---|---|---|---|
| document | Yes | A complete signed Settled answer, including its attestation block |
Output Schema
| Name | Required | Description |
|---|---|---|
| hash | No | Hash recomputed from the document |
| valid | No | true when the hash matches and the signer is Settled's published key |
| reason | No | Why it is not valid |
| attested_at | No | When the document was signed |
| hash_matches | No | Whether it matches the signed hash |
| signer_matches | No | Whether the two addresses match |
| signer_published | No | Settled's published signing address |
| signer_recovered | No | Address recovered from the signature |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint/idempotentHint/destructiveHint=false and openWorldHint=false, so safety is covered. The description adds real context beyond them: the call is 'Free', it recomputes a hash and recovers the signer, and it only works on the full response object passed unchanged. It stops short of describing failure modes (e.g., mismatch behavior) or auth needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the cost note, then purpose, then when/when-not, then the input constraint. No sentence is padding; each clause carries a distinct decision-relevant fact.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return-value semantics need not be spelled out; the description covers purpose, routing, and the input integrity requirement. For a single-parameter verification tool with an output schema, nothing an agent needs to call it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the single 'document' parameter is already documented as the complete signed answer with attestation. The description still adds a constraint the schema does not express — it must be the full response object, unchanged — which is exactly the detail that determines verification success.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a concrete verb and resource — recompute the hash of a signed Settled response and recover the signer to test authenticity — plus the outcome ('tells you whether it is authentic and unaltered'). The 'not for answers you just received directly over this server' clause separates it from the fresh-answer path used by siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'Use when' (a Settled answer arrived via a third party, cache, or log and you need to trust it) and explicit 'Not for' (answers just received directly over this server). The selection condition is stated, not inferred.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_watchBuy a Watchdog for an x402 endpointAInspect
Paid: $2.00 USDC on Base over x402 inside MCP (the first call returns the payment requirements; @x402/mcp clients pay automatically). Buys 30 days of monitoring for one x402 endpoint: probed about every 15 minutes, with a signed alert whenever status, payability, price or payTo changes. Use when: your agent depends on one endpoint and must learn quickly if it changes. Not for: one-off checks (settled_check). Give url to start or watch_id to renew; give webhook to have alerts POSTed, else read them with settled_watch_alerts. Returns watch_id.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | The x402 endpoint to watch, e.g. https://api.example.com/search; required unless watch_id is given | |
| webhook | No | https URL that receives each alert as a signed POST; omit to poll with settled_watch_alerts | |
| watch_id | No | The watch_id of an existing watch to renew for 30 more days; give this or url, not both |
Output Schema
| Name | Required | Description |
|---|---|---|
| url | No | The watched endpoint |
| note | No | What happens next |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| alerts | No | URL of the alerts feed |
| manage | No | URL of the watch |
| status | No | active or expired |
| accepts | No | Present when payment is needed: the x402 payment requirements; pay one and call again with the payment in _meta |
| renewed | No | true when this call renewed an existing watch |
| baseline | No | The endpoint's state when the watch started |
| delivery | No | webhook or poll |
| watch_id | No | The watch's id: keep it to read alerts and to renew |
| created_at | No | When the watch started |
| expires_at | No | When it ends unless renewed |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| x402Version | No | Present when payment is needed: the x402 version of the requirements |
| alert_format | No | What an alert contains |
| webhook_host | No | Host the alerts are POSTed to, if a webhook was given |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing the $2.00 USDC cost on Base, the x402 payment handshake on first call, 30-day duration, ~15-minute probe interval, and that alerts are signed and fire on status/payability/price/payTo changes. The non-idempotent, mutating nature is clear from 'buys 30 days' and 'renew', consistent with readOnlyHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every clause carries information and the use/not-for routing is compact. The payment preamble is dense and parenthetical, slightly delaying the core purpose statement, but nothing is filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a paid, long-lived, alerting watch tool the description covers price, payment flow, duration, probe frequency, alert channel, and return value (watch_id). With annotations and an output schema present, nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% so the baseline is 3, but the description adds decision-level semantics: url vs watch_id as mutually exclusive entry paths with renewal implications, and webhook vs polling via settled_watch_alerts. That is meaning beyond the field descriptions, though the 30-day renewal effect of watch_id is only implied.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action and resource: buys 30 days of monitoring for one x402 endpoint, with probe cadence and alert triggers spelled out. It also explicitly carves itself apart from settled_check, so an agent can distinguish it from siblings without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Contains explicit 'Use when: your agent depends on one endpoint and must learn quickly if it changes' and 'Not for: one-off checks (settled_check)', naming the alternative directly. It also routes the two entry modes (url to start, watch_id to renew) and the alert delivery choice (webhook vs settled_watch_alerts).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_watch_alertsRead a Watchdog's alertsARead-onlyIdempotentInspect
Free. Everything a Watchdog has recorded for its endpoint since a given alert id: each change to status, payability, price or payTo, the endpoint’s state now, and next_since to pass on the next call. Use when: you created a watch with settled_watch and did not give a webhook. Not for: endpoints without a watch (use settled_check). Poll it whenever your agent runs; the endpoint is probed about every 15 minutes.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Most alerts to return, 1-100 (default 50) | |
| since | No | Return alerts with an id above this; pass next_since from your last call, or 0 for all | |
| watch_id | Yes | The watch_id returned by settled_watch when the Watchdog was bought |
Output Schema
| Name | Required | Description |
|---|---|---|
| how | No | How to poll |
| url | No | The watched endpoint |
| more | No | true when more alerts are waiting |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| alerts | No | Alerts since the given id, oldest first: each change to status, payability, price or payTo |
| status | No | active or expired |
| delivery | No | webhook or poll |
| watch_id | No | The watch |
| expires_at | No | When the watch ends unless renewed |
| next_since | No | Pass this as since on your next call |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| endpoint_now | No | The endpoint's state now: status, payability, price, payTo, last probe |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/idempotent/no-destruction, so the bar is lower. The description adds real operational context: it is free, the endpoint is probed roughly every 15 minutes, and next_since should be passed on the following call. It does not discuss pagination limits or error behavior, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with 'Free' and what is returned, then Use when and Not for as labeled cues. No filler; every clause carries routing or scheduling information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite an output schema existing, the description still conveys the return shape, the cursor handoff, cost, and polling cadence. For a polling/alert tool with a required watch_id, nothing an agent needs to invoke it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents watch_id, since, and limit. The description reinforces the since/next_since round-trip pattern, which is useful, but adds no format or bounds beyond what the schema states. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: reading everything a Watchdog recorded for an endpoint, enumerating the exact fields (status, payability, price, payTo) and the cursor field next_since. It explicitly distinguishes from sibling settled_check with a Not for clause.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit precondition (you created a watch with settled_watch and gave no webhook), names the exclusion and its alternative (endpoints without a watch use settled_check), and prescribes the polling cadence. An agent knows exactly when to pick this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settled_weekly_reportWeekly Agent Income ReportARead-onlyIdempotentInspect
Free. The latest published Agent Income Report as JSON: which venues paid agents on-chain, worker wallets, honeypots flagged, x402 index health. Use when: you want the week’s summary, for a digest or a decision about where to look for work. Not for: live numbers (settled_status, settled_income_venues). Published Mondays; the window and ledger coverage are in the body.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| key | No | The report's key, e.g. weekly:2026-W40 |
| kind | No | Always weekly |
| week | No | ISO week of the report |
| error | No | Present only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it |
| links | No | Where the report is published |
| venues | No | Venues that paid agents on-chain |
| window | No | The 7 days covered |
| listings | No | Listings and honeypots |
| endpoints | No | x402 index health |
| attestation | No | EIP-191 signature over the answer; verify it with settled_verify or any EVM library |
| attested_at | No | When Settled signed this answer (ISO 8601) |
| settlements | No | x402 payments to indexed sellers over whole UTC days (days names them; usd_7d on the published rule, comparison_basis the basis of the week-over-week figures) |
| generated_at | No | When it was built |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only, idempotent, non-destructive, closed-world behavior, so the bar is lower. The description still adds genuinely useful context not in the annotations: it is free, published Mondays, and the window and ledger coverage are carried in the body. It stops short of describing staleness guarantees or failure modes if no report has been published yet.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the one-word qualifier 'Free', then payload summary, then when/not-for, then publication cadence. Every clause carries distinct information and none repeats the annotations or schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so the description need not explain the return shape and correctly points to the body for window and ledger coverage. For a zero-parameter read tool, the alternatives, cadence, and cost are sufficient for an agent to decide and call correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the baseline of 4 applies and there is no schema semantics for the description to duplicate or compensate for. It correctly adds nothing parameter-related, though it makes no statement about determinism of the returned week (e.g. whether one report per week is retained).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Names a specific resource (the latest published Agent Income Report) returned as JSON, and enumerates its contents: paying venues, worker wallets, flagged honeypots, x402 index health. That enumeration distinguishes it from siblings like settled_report, settled_status, and settled_events without needing their schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'Use when' clause scopes it to the week's summary for a digest or a decision about where to look for work, and the 'Not for' clause names the exact alternatives (settled_status, settled_income_venues) that serve live numbers. When-to-use, when-not-to-use, and alternatives are all present.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Changed
settled_check1 field changed- added
Output schema / properties / evidenceAdded value: +{ + "description": "The grade of the evidence and the receipt line first: grade purchased (Settled paid this endpoint and compared what came back with the listing; receipt has the amount, day, bytes, listing verdict and Base transaction) or observed (live probes, payTo history and agent reports only; the scout buys and the ledger reads on Base, so an endpoint on another network is observed only)" +}
Related MCP Connectors
Scan agent payment endpoints (x402, AP2, L402, MPP, 402) for a trust grade A-F before paying.
Pay-per-call x402 checks before an agent moves money: token safety, wallet risk, identifiers.
Verify your agent's x402 payment flow for free on Base Sepolia testnet before real money moves.
Check any x402 endpoint before your AI agent pays it: trust grade, verdict, and hijack checks.
Related MCP Servers
- AlicenseAqualityAmaintenanceEnables agents and developers to check x402 endpoints, assess scores and wallet risks, authorize payments with spending rules, and report outcomes before an agent pays.61MIT
- AlicenseAqualityBmaintenanceBefore an AI agent pays an x402 endpoint, checks whether it's safe to pay: liveness, scam/anomaly scan (payTo hijack, bait-and-switch, honeypot), and on-chain receiver verification. ~70% of x402 endpoints are dead or scams.3MIT
- FlicenseNot gradedqualityCmaintenanceEnables agents to discover and verify paid agent services through x402 payment validation and release gate checks.-
- AlicenseNot gradedqualityBmaintenanceMCP server for verifying agent payment integrity on x402, providing tools to check payTo mismatches, market stats, and lookup endpoints.1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.